Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: bEAGqFfEW8Cj4aStI7C32vM9QvBr4ICXhURa7xeXiLs=
Subject key identifier: B1:02:0B:DA:F3:E1:D4:6A:42:1F:C3:8A:63:81:6C:59:17:37:79:0F
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019CABD95E1F3E5C26C3EF17FD32C8FAF10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 02AC
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: dpWDKxAVuPYzSeiT7EBl/c0VJbDxJQo9b4qbVJOSu48=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5e:1f:3e:5c:26:c3:ef:17:fd:32:c8:fa:f1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=b1020bdaf3e1d46a421fc38a63816c591737790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:b8:72:5b:2f:d0:89:4c:81:ee:27:6e:73:
9a:cb:64:28:87:99:14:f7:ff:d5:9c:4c:45:97:14:
29:a1:55:7f:3d:4b:bd:c7:22:3e:31:29:75:83:87:
f1:ab:bf:57:09:86:ec:8f:66:b2:a9:0f:67:53:19:
41:c4:8e:bf:86:8d:a5:39:50:49:d8:1b:c7:d2:43:
7e:cb:75:93:b2:85:95:1d:01:a5:36:93:a3:65:19:
6b:56:c5:b7:df:8d:ac:d3:51:76:24:4e:e4:bf:7c:
c9:b2:5f:01:67:9a:54:a4:c0:9d:60:a1:49:40:5e:
5a:f1:df:15:f8:fc:7f:c0:9e:0c:1c:a9:fd:16:cb:
e2:04:3b:b9:65:89:d1:4e:59:9d:89:0a:2c:98:e4:
e0:15:c5:f9:ab:2b:5d:3d:f6:98:db:95:a1:e8:62:
16:5b:65:a4:15:31:b1:a6:78:22:df:83:9a:43:34:
1f:94:8d:e2:f5:8c:a1:cc:47:c6:ff:7a:80:1b:77:
92:72:4d:64:e0:56:cb:50:dc:e0:b5:29:83:16:c6:
30:a1:1f:37:52:a0:eb:f1:59:66:86:ad:e6:57:30:
ea:8b:dc:4f:5d:d6:83:e1:93:e0:63:dc:fd:56:28:
4f:76:2b:a8:23:bc:1b:3c:c8:7a:fa:1c:5b:72:8b:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:02:0B:DA:F3:E1:D4:6A:42:1F:C3:8A:63:81:6C:59:17:37:79:0F
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:64:ce:5b:20:33:27:b9:dd:0c:c8:ec:62:21:bd:e1:a2:11:
f3:63:ed:a1:46:4c:ac:58:e2:2f:6f:1d:22:fc:cd:41:c7:b4:
49:1d:b4:61:4b:b6:f8:85:83:db:46:4d:41:0b:c3:6c:b9:70:
2c:dc:8f:52:49:f5:5a:6b:be:4c:28:19:97:30:f0:71:48:92:
4f:fd:76:a8:3f:cb:f4:d7:ea:3c:0f:ba:86:ee:8f:30:7b:18:
0c:5f:65:b4:9f:df:7c:cf:5d:7a:d1:da:da:3b:4e:62:8d:22:
7f:44:c3:0c:47:9b:b3:d4:63:fa:32:bb:e0:6c:31:7e:a6:bb:
f4:bb:9d:aa:50:b2:0f:de:dd:f6:b0:2a:76:ef:94:ff:2a:6f:
d7:f3:cd:05:fc:e6:f2:70:c4:c2:59:60:dc:b6:0f:c3:f5:ee:
a7:4c:21:4c:66:43:a3:6d:fa:de:00:0a:b1:22:7b:16:1f:c5:
85:c5:28:a4:8f:f5:1c:78:be:c4:14:ee:b4:e7:c8:dc:1d:8b:
0e:26:ee:f5:ce:25:99:22:e7:c1:1b:09:bf:e3:55:76:d8:93:
ab:2c:dc:05:ff:33:6e:74:56:bf:f2:ef:42:c9:91:a1:19:30:
ab:cb:f4:e6:65:da:42:36:ae:e5:58:f8:66:7b:ee:d1:04:97:
f6:a2:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:38 2026 by rpki-client